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(57) ABSTRACT 

In a data carrier with a data processing device in which there 
is provided an external as well as an internal power supply, 
it is proposed to provide at least one switching means in 
which is accommodated in the data carrier in order to realize 
temporary decoupling of the external power supply, thus 
making the retrieval of sensitive data impossible. 

4 Claims, 1 Drawing Sheet 



DATA IN 0- 
DATA OUT 0 



,J, 




10 



/ 



BAHERY 
SOLARCEIL 



05/05/2004, EAST Version: 1.4.1 



U.S. Pattemlt 



Jan. 14,2003 



US 6,507,130 Bl 




FIG.1 



.....1. 



DATA IN 0 
DATA OUT 0 



.J. 




1^. 



FIG. 2 



05/05/2004, EAST Version: 1.4.1 



us 6,507,130 Bl 

1 2 

DATA CARRIER WITH PROTECTION device a least for this period of time. Suitable for this 

AGAINST SPY OUT purpose are, for example, recbaigeable batters or a solar cell 

10 (shown in FIG. 2), illuminated by a read apparatus, or 
capacitois which are proportioned so that the power supply 

BACKGROUND OF TIIE INVENTION 5 is ensured at least during the decouphng time. Power supply 

beyond that time is not required so as to insure the intended 

1. Field of the Invention decoupling step the duration of the decoupling for the 
The invention relates to a daU carrier with a dau pro- purpose of disguising the operating time can be comroUed 

cessioft cievice as wcU as to an eledffSttic component with a ^oi only by the data proccssmg device itself but also, for 

data proces&iflg device for such a d^a carrier. lo ^^^^^P^^ ^ time-controUed manner or unUl the energy of 

*^ . ^ . „ , , ^ the internal power supply source for has decreased to a given 

2. Description of the Related Art ^^j^^ 

Recently doubts have arisen as regards the security of data 2 shows the internal structure of a preferred embodi- 

carriers, it being claimed that security-relevant data can be meat of a chip 3. Inside the chip there is provided the data 

discovered by observation of the power consumption of such processing section 5 in which the security-relevant opcra- 

a data carrier. tions are carried out. To this end the data processing section 

5 is connected to the contact field 2, i.e. to the contacts used 

SUMMARY OF TIIE INVENTION fo^. transmitting data from and to the data processing section 

It is an object of the invention to ensure that such attempts 5. llie current supply contact V of the Contact field 2 is 

cannot be successful connected to a first switch 6 which is used as said decouphng 

' ^ . - - . device. The other end of the first switch 6 is connected to the 

Tins object is achieved accordmg to the invention in that ^^^^ processing section 5. Also 

a data earner with an external power supply is also provided ^^^^^^^^ ^^is power supply input of the data processing 

with an internal power supply, at least one switching means ^^^^^ ^ ^ .^^^ ^ ^^^^ ^ ^ ^-^ ^j^^^l 

being provided in the data carrier in order to realize tern- ^^^^ ^ ^^^^ g ^^^^^ ^ 

porary decouplmg of the external power supply. 25 jischaiging device. The first and the second switch «,8 arc 

The advantage of the invention resides in the fact that the controlled by a power supply control circuit 9. Preferably, 

decoupling of the external power supply, preferably during the data processing section 5, the first and the second switch 

security-relevant operations or at least partly during 6^, the capacitor 7 and the power supply control circuit arc 

security-relevant operations of the data pcoccsang device, arranged on a single chip so as to make it harder to 

frustrates such attempts to fraud. 30 deactivate parts of that arrangement by opening the chip 

Advantageous embodiments of the invention are card 1. 
described in the dependent Claims. When the internal power supply sources cannot be pro- 
The invention will be described in detail hereinafter. portioned so as to enable complete execution of the security- 
Data carriers provided with data processing devices, for 35 relevant operations during a single decoupling period, the 
example so-called chip cards, incorporate a test function for security-relevant operations are preferably subdivided mlo a 
the protection of security-relevant transactions, for example number of sub -ope rations; the internal power supply should 
the dispensing of cash in money-dispensing machines; such then be capable of providing the power supply for at least 
a test function serves to test the authorization for the each sub -operation. The circuit elements fed by the internal 
transaction. In order to establish proof of authorization, use 40 POwer source are thus decoupled from the external power 
is made of, for example so-called Personal Identification supply at least during such sub-operations. 
Numbers (PIN). The PIN can be tested in the data processing For example, the decoupling is triggered by switching 
device of the data carrier while utilizing key algorithms. The means which are preferably arranged in such a manner that 
power supply for the data carrier is customarily realized by only weak coupling capacitances occur between internal and 
way of contacts or by induction of alternating currents which 45 external power supply leads. 

are converted into a direct current in the data carrier. Additionally, in order to cover any capacitively coupled 

small signals or small signals arising by inadiation, noise or 

BRIEF DESCRIPTION OF THE DRAWINGS masking or superposition signals can be apphed via the leads 

connected to the external power supply. 

HG. 1 shows a chip card. _^ ^ capacitor is used as an internal power supply 

FIG. 2 shows a schematic of the chip card FIG. 1. source, for example supporting and smoothing capacitors 

HFTAIT FD nF^rRTPXION OF THF provided on the chip can be used. These capacitors are 

PRLILKKLD LM13UU1MLM operatioDB and recharged between the sub-operations, or 

HG. 1 shows a so called chip card 1 with a contact field 55 after the operation, via the external power supply. 

2 and an embedded diip 3. The chip 3 is connected to the Preferably, prior to such recharging the internal power 

contact field 2 via internal wires 4. supply source is always adjusted to the same discharged 

In order to preclude with certainty, at least during testing state or to different charging stales due to incidental power 

of the transaction authorization, the retrieval of information consumption. Thus, sensible information as regards the 

regarding the authorization key via the externally applied 60 arithmetic operations performed during the decouplmg 

and hence measurable current consumption, or via the phase cannot be derived either by measurement of the 

signals applied via the current leads, the supply leads to the current required for the recharging, 

external cunent source are decoupled by means of decou- ^hat is claimed is: 

pUng means, for example switches. In this manner it is 1. A data carrier comprising: 

prevented that signals which are produced by internal opera- 65 a c^ata processing device; 

tions can reach the environment. An internal power supply means for connection to an external power supply that 

source is used for the power supply of the data processing supplies power to the data processing device; 
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an internal power supply for supplying power to the data 
processing device only during a testing of transactions 
authorization, and 
at least one switching means being provided to connect 
the means for connecting the external power supply to 
the data processing device, so that only during said 
testing^;^of7txansaciipjs2ut^^ 
means:temporarily dc'cbuples tfc rnean^ connection 
tO'thexxternal-powef-^ipply^rgm: 
device. ^ 
2. A data carrier as claimed in claim 1, characterized in 
that the decoupling of the means for connection to the 
external power supply takes place at least partly during 
predetermined states of operation of a data processing 



30 



section, wherein the data processing section signals a power 
control circuit to decouple the means for connection to the 
external power supply by opening the switching means. 

3. A data carrier as claimed in claim 1, characterized in 
that a rechargeable battery, a capacitor or a solar cell is 
provided as the internal power supply. 

4. A data carrier as claimed in claim 1, characterized in 
that prior to an end of the temporary decoupling of the 
external power supply there is performed a discharging 
operation or a loading operation of the internal power supply 
which is random controlled or takes place to a predeter- 
mined value. 
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